From bc2be31349caeef6efdeb121d4a23a239a01ee85 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Fri, 6 Nov 2026 10:11:14 +0000
Subject: [PATCH] test(security): document intentional password fixture for CI
scanner
---
tests/template_coverage_tests.rs | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/tests/template_coverage_tests.rs b/tests/template_coverage_tests.rs
index 68bdcd6..52ed7bc 100644
--- a/tests/template_coverage_tests.rs
+++ b/tests/template_coverage_tests.rs
@@ -106,7 +106,8 @@ fn script_types_and_encoded_attributes_cannot_silently_bypass_an_adapter() {
#[test]
fn nested_quotes_remain_part_of_attribute_and_css_values() {
for (name, source) in [
- ("secret.html", r#""#),
+ // Deliberate dummy password: the detector must continue to flag this fixture.
+ ("secret.html", r#""#), // scanner-allow: rust-secrets
("secret.css", r#"p { password: "'1234567'"; }"#),
] {
let report = scan(name, source);